CLAIMS 



1 VjLx ^ telecommunications system coupled to a user's telecommunications 

2 device, a security apparatus comprising: 

3 a database storing at least one user profile, wherein the profile indicates one of 

4 a plurality of security modes selectable by the user; and 

5 a computer coupled to communicate with the database, and coupled to the 

6 telecommunications system to receive telecommunications data transmissions, wherein the 

7 computer is configured to: 

8 receive mode selection user input, wherein the mode selection 

9 user input includes selecting one of the plurality of security modes, wherein the 

10 selected security mode is no0 personal identification number (PIN) change, 

11 store the selected security mode in the at least one user profile, 

12 wherein the user profile corresponds to the user, 

13 in response to a telecommunications call from the user, retrieve 

14 the at least one user profile, 

15 receive authorization user input, and 

16 provide user authorization by comparing the received 

17 authorization user input to a^ secuiity»-GQde based on the retrieved user profile, 

18 wherein the security code is an automatically and dynamically generated user 

19 security code based on the selected security mode. "'^^"^ ^ 

2. The security apparatus of claim 1, wherein the user input is DTMF input 

1 provided by a user, and wherein the computer is fuither configured to: 

3 receive input from the user for assigning a high security mode selected 

4 firom the plurality of security modes to at least one event, wherein the event is a 

5 predetermined time period, a data type received by the telecommunications system or 

6 a source of an incoming data signal to the telecommunications system; 

7 periodically generate a user security code; and 
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8 provide an indication to the user of the user security code, wherein the 

9 indication to the user is performed via a paging network. 



3,) The security apparatus of claim 1 wherein the plurality of security 



1 modes includes a current time sequence recognition mode wherein the user security code is 

2 based on predetermined numerical sequence based on an hour of day, day of week, day of" 

3 month and month of year, and wherein the mode selection user input includes a user selected 

4 arrangement of the hour of day, day of week, day of month and month of year. 

4. The apparatus of claim 1 wherein the plurality of security modes 

1 includes a personal question response recognition mode wherein the computer is further 

2 configured to: 

4 ^ retrieve at least a subset of answers to questions stored by the user in the user 

5 security record; 

6 receive answers to a plurality of questions answerable by the user; 

7 randomly shuffle an order of the plurality of questions and providing the 

8 shuffled questions to the user; and 

9 receive user input answers corresponding to the answers to the plurality of 

10 questions in the shuffled order, wherein the user security code corresponds to the answers in 

11 the shuffled order. 




5^ A method of providing security for a system, comprising: 

2 receiving user input; 

3 retrieving a user profile, wherein the profile indicates one security mode; and 

4 providing authorization by comparing the received user input to a security code 

5 based on the retrieved user profile, wherein the security code is an automatically and 

6 dynamically generated user security code. 
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6. The method of claim 5 wherein the system is a telecommunications 

1 system, wherein the user input is DTMF input provided by a user, and wherein the method 

2 includes; 

4 receiving input from the user for assigning a high security mode selected from 

5 a pliu'ality of security modes to at least one event, wherein the selected security mode is not a 

6 personal identification number (PIN) change, and wherein the event is a predetermined time 

7 period, a data type received by the telecommunications system or a source of an incoming 

8 data signal to the telecommunications system; and 

9 providing an indication to the user of the user security code, wherein the user 

10 security code is periodically generated, and wherein the indication to the user is performed 

11 via a paging network. 

The method of claim 5 wherein the system is a telecommunications 

1 system, and wherein the method includes: 

3 receiving input from the user for assigning a selected security mode selected 

4 from a plurality of security modes to at least one event, wherein the event is a predetermined 

5 time, a data type received by the telecommunications system or a source of an incoming data 

6 signal to the telecommunications system; and wherein the predetermined time is a time of 

7 day or day of week, wherein the data type is a voice telephone call, videophone call, 

8 electronic mail transmission or a facsimile transmission, and wherein the source is an 

9 intemal/extemal transmission or a transmission from a predetermined source. 

8. The method of claim 5 wherein the system is a telecommimications 

1 system, and wherein the user input is DTMF data, voice pattem fingerprint data, voice 

2 recognized command data, alphanumeric data or bitmap data. 

9. ] The method of claim 5 wherein the method includes: 

2 "receiving input from the user for assigning a selected security mode selected 

3 from a plurality of security modes to at least one event, wherein the event is a predetermined 

4 time, a data type received by the system, or a source of an incoming data signal to the 

5 system. 
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10. The method of claim 5 wherein the system is a telecommunications 

1 system, and wherein the user input is DTMF data, voice pattern fingerprint data, voice 

2 recognized command data, alphanumeric data or bitmap data. 

^iT^ The method of claim 5 wherein providing authorization includes 
1 providing authonzation to the user to access stored data files. 

method of claim 5 wherein providing authorization includes 
1 providing authorization to the user to access facilities. 



^13^ The method of claim 5 wherein the system is a telecommunications 

1 system, and wherein the at least one security mode includes a security algorithm that 

2 generates a user security code, wherein the user kno ws the sec urity algorithm and may 

3 approximately concurrently generate the same user security code. 

\^4^ The method of claim 5, further comprising communicating to the user 

1 which of a plurality of security modes is an indicated security mode. 

15y The method of claim 5, further comprising; 

2 encrypting a received telecommunication transmission, and . 

3 receiving a decryption code from the user to decrypt the received 

4 telecommunication transmission. 

16. The method of claim 5, further comprising providing an indication to the 

1 user of the user security code, wherein the user security code is periodically generated, and 

2 wherein the indication to the user is peifonned via an email transmission. 
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17. The method of claim 5 wherein the security mode includes 

1 automatically and periodically generated user security code recognition and wherein the 

2 method includes: 

4 providing an indication to the user of the user security code, wherein the user 

5 security code is periodically generated, and wherein the indication to the user is performed 

6 via a paging network. 

18. The method of claim 5, further comprising a plurality of security modes, 
1 including a voice pattem profile recognition mode. 

/1 9. J The method of claim 5 wherein the security mode includes a current 

1 time sequence'Tecognition mode wherein the user security code is based on predetermined 

2 numerical sequence based on a hour of day, day of week, day of month and month of year, 

3 and wherein the hour of day, day of week, day of month and month of year are arranged in a 

4 predetermined fashion known by the system and the user. 

20. The method of claim 5 wherein the security mode includes a personal 

1 question response recognition mode wherein the personal question response recognition 

2 mode includes: 



4 receiving answers to a plurality of questions answerable by the user; 

5 randomly shuffling an order of the plurality of questions and providing the 

6 shuffled questions to the user; and 

7 receiving user input conesponding to the answers to the plurality of questions 

8 in the shuffled order, wherein the user security code corresponds to the answers in the 

9 shuffled order. 

(^^^^^^ ^ method of providing security for a system, comprising: 

2 receiving user input selecting one of a plurality of security modes, wherein the 

3 selected security mode is not a personal identification number (PIN) change; 

4 storing the selected security mode in a user profile, wherein the user profile 

5 corresponds to the user; and 
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6 providing authorization by comparing a received user input to a dynamic 

7 security code based on the stored user profile and the user selected security mode. 

22. The method of claim 21 wherein the system is a telecommunications 

1 system, wherein the user input is DTMF input provided by a user, wherein the dynamic 

2 security code is an automatically and dynamically generated user security code based on the 

3 selected security mode, and wherein the method includes: 

5 receiving input from the user for assigning a high security mode selected from 

6 the plurality of security modes to at least one event, wherein the event is a predetermined 

7 time period, a data type received by the telecommunications system or a source of an 

8 incoming data signal to the telecommunications system; and 

9 providing an indication to the user of the user security code, wherein the user 

10 security code is periodically generated, and wherein the indication to the user is performed 

11 via a paging network. 

(23.) The method of claim 21 wherein the system is a telecommimications 

1 system, and wherein the method includes: 

3 receiving input from the user for assigning a selected security mode selected 

4 from the plurality of security modes to at least one event, wherein the event is a 

5 predetermined time, a data type received by the telecommunications system or a source of an 

6 incoming data signal to the telecommunications system; and wherein the predetermined time 

7 is a time of day or day of week, wherein the data type is a voice telephone call, videophone 

8 call, electronic mail transmission or a facsimile tiansmission, and wherein the source is an 

9 internal/external transmission or a transmission from a predetermined source. 

The method of claim 21 wherein at least one of the plurality of security 

1 modes includes a secmity algorithm that generates the dynamic security code, wherein the 

2 user knows the security algorithm and may approximately concurrently generate the same 

3 dynamic security code. 
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(^^^^^ The method of claim 21, fuither comprising; 

2 encrypting a received telecommunication transmission with the dynamic 

3 security code. 



26. The method of claim 21, further comprising providing an indication to 

1 the user of the dynamic security code, wherein the dynamic security code is periodically 

2 generated, and wherein the indication to the user is performed via an email or pager 

3 transmission. 

/2yyv The method of claim 21 wherein the plurality of security modes 

1 includes a current time sequence recognition mode wherein the dynamic security code is 

2 based on predetermined sequence based on a hour of day, day of week, day of month and 

3 month of year, and wherein the hour of day, day of week, day of month and month of year 

4 are arranged in a predetermined fashion by the method and known by the user. 

28. The method of claim 21 wherein the plurality of seciuity modes 

1 includes a personal question response recognition mode wherein the personal question 

2 response recognition mode includes: 

4 receiving answers to a plurality of questions answerable by the user; 

5 randomly shuffling an order of the plurality of questions and providing the 

6 shuffled questions to the user; and 

7 receiving user input conesponding to the answers to the plurality of questions 

8 in the shuffled order, wherein the user security code conesponds to the answers in the 

9 shuffled order. 

{^2^f The method of claim 21 wherein the user selected security mode is a 

1 randomly applied one of the plurality of security modes, and wherein the method further 

2 comprising conmiunicating to the user which of the plurality of security modes is a currently 

3 apphed security mode. 

5 
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SOj An apparatus for restricting access to one or more resoxirces, the 

1 apparatus comprising: 

3 a computer logically coupled to the one or more resources, wherein the 

4 computer is configured to receive user input; retrieve a user profile, wherein the profile 

5 indicates at least one security mode; automatically and dynamically generate a user security 

6 code based on the indicated security mode and the retrieved user profile; and provide 

7 authorization by comparing the received user input to the dynamically generated user 

8 security code. 



The apparatus of claim 30 wherein the computer is configured to receive 

1 input from the user for assigning a selected security mode selected from a plurality of 

2 security modes to at least one event, wherein the event is a predetermined time, a data type 

3 received by the telecommunications system or a source of an incoming data signal to the 

4 teleconmfiunications system. 

^^2^ The apparatus of claim 30 wherein the resources are 

1 teleconmnmications resources, wherein the computer is coupled to a telecommunications 

2 network, and wherein the at least one security mode includes a security algorithm that 

3 generates a user security code, wherein the user knows the security algorithm and may 

4 approximately concurrently generate the same user security code. 

33. The apparatus of claim 30 wherein the computer is configured to 

1 periodically generate the user secmity code and to provide an indication to the user of the 

2 user security code via a computer network or pager network transmission. 

The appaiatus of claim 30 wherein the security mode includes a current 

1 time sequence recognition mode wherein the user security code is based on predetermined 

2 numerical sequence based on a hour of day, day of week, day of month and month of year, 

3 and wherein the hour of day, day of week, day of month and month of year are arranged in a 

4 predetermined fashion known by the computer and the user. 
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35. The apparatus of claim 30 wherein the security mode includes a 



1 personal question response recognition mode wherein the computer is further configured to 

2 receive answers to a plurality of questions answerable by the user; randomly shuffle an order 

3 of the plurality of questions and providing the shuffled questions to the user; and receive user 

4 input corresponding to the answers to the plurality of questions in the shuffled order, wherein 

5 the user security code corresponds to the answers in the shuffled order. 

\^6j An apparatus for providing security for a system, the apparatus 

1 comprising: 

3 means for receiving user input selecting one of a plurality of security modes, 

4 wherein the selected security mode is not a personal identification number (PIN) change; 

5 means, coupled to the means for receiving, for storing the selected security 

6 mode in a user profile, wherein the user profile corresponds to the user; and 

7 means, coupled to the means for storing, for providing authorization by 

8 comparing a received user input to a dynamic security code based on the stored user profile 

9 and the user selected security mode. 



1 security modes includes a security algorithm that generates the dynamic security code, 

2 wherein the user knows the security algorithm and may approximately concurrently generate 

3 the same dynamic security code. 



1 indication to the user of the dynamic secmity code, wherein the dynamic security code is 

2 periodically generated, and wherein the indication to the user is performed via an email or 

3 pager transmission. 




The appaiatus of claim 36 wherein at least one of the plurality of 



5 



38. The appaiatus of claim 36, further comprising means for providing an 
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^^9^ A computer-readable, signal bearing medium storing instructions for a 

1 computer for providing security for a system, the instructions comprising: 

3 receiving user input; 

4 retrieving a user profile, wherein the profile indicates at least one security 

5 mode; and 

6 providing authorization by comparing the received user input to a security code 

7 based on the retrieved user profile, wherein the security code is an automatically and 

8 dynamically generated user security code. 

40.;^ The computer-readable medium of claim 39 wherein the system is a 

1 computer network, and wherein the computer-readable medium is a logical node in the 

2 network receiving the instructions. 

^^41^ The computer-readable medium of claim 39 wherein the system is a 

1 telecommimications system, wherein the user input is generated by a user of a 

2 telecommunications device and wherein the at least one security mode includes a security 

3 algorithm that generates a user secmity code, wherein the user knows the security algorithm 

4 and may approximately concurrently generate the same user security code. 

42. The computer-readable medium of claim 39, further comprising 

1 providing an indication to the user of the user security code, wherein the user security code is 

2 periodically generated, and wherein the indication to the user is performed via a computer 

3 network or pager network transmission, and wherein the computer-readable medium is a 

4 memory or database of the computer. 

^\ The computer-readable medium of claim 39 wherein the security mode 

1 includes a current time sequence recognition mode wherein the user security code is based 

2 on predetermined numerical sequence based on a hour of day, day of week, day of month 

3 and month of year, and wherein the hour of day, day of week, day of month and month of 

4 year are arranged in a predetermined fashion known by the system and the user. 
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44. The computer-readable medium of claim 39 wherein the security mode 

1 includes a personal question response recognition mode wherein the personal question 

2 response recognition mode includes: 

4 randomly shuffling an order of a plurality of questions and providing the 

5 shuffled questions to the user; and 

6 receiving user input conesponding to answers to the plurality of questions in 

7 the shuffled order, wherein the user security code corresponds to the answers in the shuffled 

8 order, 

45, The computer-readable medium of claim 39 wherein the security mode 

1 includes a personal question response recognition mode wherein the personal question 

2 response recognition mode includes standard questions, personalized questions or a 

3 combination of standard questions and personalized questions selected and provided to the 

4 user, wherein the security code conesponds to answers to the questions. 

^p>y computer-readable medium of claim 39 wherein the instructions 

1 include: 

3 receiving user input selecting one of a plurality of scrambling modes, and 

4 providing an indication to the user of an initial code, where the indication is 

5 provided to the user over another system that differs from the system; and 

6 wherein receiving user input includes receiving a true security code 

7 corresponding to the indicated initial code modified by the user based on the selected mode. 

47. The computer-readable medium of claim 39 wherein the security mode 

1 includes a matrix security mode, wherein the matiix mode includes: 

3 receiving position indicating signals from a user indicating initial positions; 

4 providing a matrix of random numbers to the user; and 

5 receiving user input conesponding to numbers selected from the provided 

6 matrix based on the initial positions, wherein the user's security code corresponds to 

7 numbers within the selected positions. 
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48^ A computer-readable and computer-generated data signal transmitted via 

1 a transmission medium, the generated data signal permitting a computer system to perform a 

2 method of providing security for a system, comprising: 

4 receiving user input selecting one of a plurality of security modes, wherein the 

5 selected security mode is not a personal identification number (PIN) change; 

6 storing the selected security mode in a user profile, wherein the user profile 

7 corresponds to the user; and 

8 providing authorization by comparing a received user input to a dynamic 

9 security code based on the stored user profile and the user selected security mode. 

149 j The transmitted data signal of claim 48 wherein at least one of the 

1 plurality of security modes includes a security algorithm that generates the dynamic security 

2 code, wherein the user knows the security algorithm and may approximately concurrently 

3 generate the same dynamic security code. 



iSb.^ The transmitted data signal of claim 48, further comprising; 

2 encrypting a received telecommunication transmission with the dynamic 

3 security code. 



51. The transmitted data signal of claim 48, further comprising providing an 

1 indication to the user of the dynamic security code, wherein the dynamic security code is 

2 periodically generated, and wherein the indication to the user is performed via an email or 

3 pager transmission. 




52y The transmitted data signal of claim 48 wherein the plurality of security 

1 modes includes a current time sequence recognition mode wherein the dynamic security code 

2 is based on predetermined sequence based on a hour of day, day of week, day of month and 

3 month of year, and wherein the hour of day, day of week, day of month and month of year 

4 are arranged in a predetermined fashion by the method and known by the user. 
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In a system, a user prompt signal for use in providing security for the 

1 system, comprising: 

3 a first user prompt portion for instructing a user to select one of a plurality of 

4 security modes; 

5 a second user prompt portion for instructing a user to input a modification to a 

6 user profile, wherein the user profile conesponds to the user, wherein the modification 

7 applies to a user selected security mode, and wherein the selected security mode and 

8 modification are not a personal identification number (PIN) change; and 

9 a third user prompt portion for instructing a user to input a dynamic security 

10 code based on the modified user profile and the user selected security mode. 

/54\ The user prompt signal of claim 53 wherein the first, second and third 

1 user prompt portions aie voice scripts transmitted to a user over a telecommunications 

2 network. 

f 55. The user prompt signal of claim 53 wherein the first, second and third 
1 user prompt portions are display descriptions tiansmitted to a user over a computer network. 

56. The user prompt signal of claim 53 wherein the first user prompt portion 

1 includes instructions for instiiicting a user to select a user intenogation security mode, and 

2 wherein the second user prompt portion includes options for selection standard or 

3 customized questions for the user inteiTOgation security mode. 

The user prompt signal of claim 53 wherein the first user prompt portion 

1 includes selecting one of a plurality of ti ansmitted code scrambling modes corresponding to 

2 methods of generating a dynamic security code based on an initial code transmitted to the 

3 user. 

58. The user prompt signal of claim 53 wherein the first user prompt portion 

1 includes instructions for instructing a user to select one of a plurality of positions within an 

2 initial matrix, and the third user prompt portion includes instructions for instructing the user 
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4 to input the dynamic security code based on the selected positions and a transmitted matrix 

5 of random numbers. 

^ method of providing security for a system, comprising: 

2 providing to users a pluraUty of security modes, wherein the plurality of 

3 security modes include modes in addition to personal identification number (PIN) changes, 

4 and where at least one security mode has an associated fee higher than a fee associated with 

5 other security modes in the plurality of security modes; 

6 storing user selected security modes in respective user security records; and 

7 charging users selecting the at least one security mode with the associated 

8 higher fee. 

/ 

/6Q^ The method of claim 59, further comprising charging users a selected 
1 fee for being^able to employ a plurality of security modes. 

(^6l) A computer-readable medium containing a data structure for use in 

1 restricting access to resources, the data structure comprising: 

3 at least first and second fields identifying respective first and second user- 

4 selectable security modes, wherein the first and second security modes do not both represent 

5 a personal identification number (PIN) change, and wherein the first and second secxuity 

6 modes each restrict access to the resources; and 

7 at least a third field comprising parameters associated with a user-selected one 

8 of the first and second security modes. 

{ 62./ The computer-readable medium of claim 61 wherein the resources are 
1 telecommunications resources, and wherein the data structure includes: 

3 additional fields for user-initiated assigning of a selected security mode 

4 selected from the plurality of security modes to at least one event, wherein the event is a 

5 predeteimined time, a data type received by the telecommunications resources or a source of 

6 an incoming data signal from the telecommunications resources. 
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63^ The computer-readable medium of claim 61, further comprising: 

an encryption enabled field indicating a received telecommunication 



3 transmission is encrypted. 



64. The computer-readable medium of claim 61, further comprising email 



1 and pager address fields corresponding to a user's email address and pager number 

2 respectively, and wherein the first security mode includes providing an indication to the user 

3 of the dynamic security code, wherein the dynamic security code is periodically generated, 

4 and wherein the indication to the user is performed via an email or pager transmission. 



1 modes includes a current time sequence recognition mode wherein the dynamic security code 

2 is based on predetermined sequence based on a hour of day, day of week, day of month and 

3 month of year, and wherein the data stnicture includes fields indicating an order of hour of 

4 day, day of week, day of month and month of year variables. 

66. In a security system for restricting access to one or more resources, an 

1 apparatus comprising: 

3 a pager network component coupled to the security system, wherein the pager 

4 network component is configured to receive user security codes periodically and randomly 

5 generated by the security system and transmitted to the pager network component, wherein 

6 the pager network component is further configured to transmit the user security codes to a 

7 plurality of user pager devices, and wherein the user security codes are required for accessing 

8 the one or more resources. 



1 before the pager network component ta ansmits the user security codes to the plurality of user 

2 pager devices. 




The computer-readable medium of claim 61 wherein the first security 



671 The apparatus of claim 66 wherein the user security codes are encrypted 
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^ 6&. An appaiatus for accessing one or more resources whose access thereto 

1 is restricted, the apparatus comprising: 

3 a mobile telecommunications device having a wireless transceiver, a user-input 

4 device, a user-output device, and a processor coupled to the transceiver and user input and 

5 output devices, wherein the processor is configured to provide user identification data to 

6 identify a user profile remotely stored at a server; receive user input for a user security code, 

7 wherein the security code corresponds to an automatically and dynamically generated user 

8 security code generated at the sewer computer based on the retrieved user profile; and 

9 receiving access to one or more resources based on a correlation between the provided user 
10 input and the automatically and dynamically generated user security code. 
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